Monitoring the encryption of storage spaces

You can monitor whether storage space encryption is enabled and which storage spaces are encrypted.

About this task

To determine whether storage space encryption is enabled, run the oncheck -pr command. If storage space encryption is enabled, the output includes the following line, which identifies the encryption cipher:

Encryption-at-rest is enabled using cipher 'cipher'
If the root dbspace is encrypted, the output of the oncheck -pr command contains the following line: 
The ROOT Dbspace is encrypted

To see which storage spaces are encrypted, use one of the following methods:

  • Run the onstat -d command. Position 6 of the flags field contains an E if the storage space is encrypted.
  • Query the sysdbspaces table in the sysmaster database. The is_encrypted column shows whether a storage space is encrypted.